<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 28 Jul 2026 12:15:23 +0000</lastBuildDate>
    <item>
      <title>f5142fbd-723c-412f-a4b1-d9cc53efb853</title>
      <link>https://vulnerability.circl.lu/sighting/f5142fbd-723c-412f-a4b1-d9cc53efb853/export</link>
      <description>{"uuid": "f5142fbd-723c-412f-a4b1-d9cc53efb853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17636", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40865\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\ud83d\udccf Published: 2022-09-23T13:35:42.000Z\n\ud83d\udccf Modified: 2025-05-27T14:43:34.801Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSchedWifi.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSchedWifi.md", "creation_timestamp": "2025-05-27T14:48:23.000000Z"}</description>
      <content:encoded>{"uuid": "f5142fbd-723c-412f-a4b1-d9cc53efb853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17636", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40865\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\ud83d\udccf Published: 2022-09-23T13:35:42.000Z\n\ud83d\udccf Modified: 2025-05-27T14:43:34.801Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSchedWifi.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSchedWifi.md", "creation_timestamp": "2025-05-27T14:48:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f5142fbd-723c-412f-a4b1-d9cc53efb853/export</guid>
      <pubDate>Tue, 27 May 2025 14:48:23 +0000</pubDate>
    </item>
    <item>
      <title>e7f6a294-6e29-4d10-a199-98a4ba6e32e3</title>
      <link>https://vulnerability.circl.lu/sighting/e7f6a294-6e29-4d10-a199-98a4ba6e32e3/export</link>
      <description>{"uuid": "e7f6a294-6e29-4d10-a199-98a4ba6e32e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40869\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\ud83d\udccf Published: 2022-09-23T13:32:22.000Z\n\ud83d\udccf Modified: 2025-05-27T14:44:13.104Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromDhcpListClient-list.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromDhcpListClient-list.md", "creation_timestamp": "2025-05-27T14:48:22.000000Z"}</description>
      <content:encoded>{"uuid": "e7f6a294-6e29-4d10-a199-98a4ba6e32e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40869\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\ud83d\udccf Published: 2022-09-23T13:32:22.000Z\n\ud83d\udccf Modified: 2025-05-27T14:44:13.104Z\n\ud83d\udd17 References:\n1. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromDhcpListClient-list.md\n2. https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromDhcpListClient-list.md", "creation_timestamp": "2025-05-27T14:48:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7f6a294-6e29-4d10-a199-98a4ba6e32e3/export</guid>
      <pubDate>Tue, 27 May 2025 14:48:22 +0000</pubDate>
    </item>
    <item>
      <title>a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3</title>
      <link>https://vulnerability.circl.lu/sighting/a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3/export</link>
      <description>{"uuid": "a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4086", "type": "seen", "source": "https://t.me/cibsecurity/53216", "content": "\u203c CVE-2022-4086 \u203c\n\nA vulnerability was found in WP White Security WP Activity Log Plugin. It has been classified as problematic. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214053 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:19.000000Z"}</description>
      <content:encoded>{"uuid": "a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4086", "type": "seen", "source": "https://t.me/cibsecurity/53216", "content": "\u203c CVE-2022-4086 \u203c\n\nA vulnerability was found in WP White Security WP Activity Log Plugin. It has been classified as problematic. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214053 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a2ae9119-08a0-4349-8b6b-d9ef04dd3ed3/export</guid>
      <pubDate>Sun, 20 Nov 2022 16:36:19 +0000</pubDate>
    </item>
    <item>
      <title>00c92281-e621-4d94-8a61-1541dba6c005</title>
      <link>https://vulnerability.circl.lu/sighting/00c92281-e621-4d94-8a61-1541dba6c005/export</link>
      <description>{"uuid": "00c92281-e621-4d94-8a61-1541dba6c005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40861", "type": "seen", "source": "https://t.me/cibsecurity/50320", "content": "\u203c CVE-2022-40861 \u203c\n\nTenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand-&amp;gt;FUN_0007db78 function with the request /goform/SetNetControlList/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T09:34:03.000000Z"}</description>
      <content:encoded>{"uuid": "00c92281-e621-4d94-8a61-1541dba6c005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40861", "type": "seen", "source": "https://t.me/cibsecurity/50320", "content": "\u203c CVE-2022-40861 \u203c\n\nTenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand-&amp;gt;FUN_0007db78 function with the request /goform/SetNetControlList/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T09:34:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00c92281-e621-4d94-8a61-1541dba6c005/export</guid>
      <pubDate>Wed, 28 Sep 2022 09:34:03 +0000</pubDate>
    </item>
    <item>
      <title>8c4ff589-95cb-4ba0-9270-ef5036674ba2</title>
      <link>https://vulnerability.circl.lu/sighting/8c4ff589-95cb-4ba0-9270-ef5036674ba2/export</link>
      <description>{"uuid": "8c4ff589-95cb-4ba0-9270-ef5036674ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40864", "type": "seen", "source": "https://t.me/cibsecurity/50338", "content": "\u203c CVE-2022-40864 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:57.000000Z"}</description>
      <content:encoded>{"uuid": "8c4ff589-95cb-4ba0-9270-ef5036674ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40864", "type": "seen", "source": "https://t.me/cibsecurity/50338", "content": "\u203c CVE-2022-40864 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c4ff589-95cb-4ba0-9270-ef5036674ba2/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:57 +0000</pubDate>
    </item>
    <item>
      <title>0ef7c4d2-cc71-4ee3-b058-ecf90097cf81</title>
      <link>https://vulnerability.circl.lu/sighting/0ef7c4d2-cc71-4ee3-b058-ecf90097cf81/export</link>
      <description>{"uuid": "0ef7c4d2-cc71-4ee3-b058-ecf90097cf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40868", "type": "seen", "source": "https://t.me/cibsecurity/50336", "content": "\u203c CVE-2022-40868 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:55.000000Z"}</description>
      <content:encoded>{"uuid": "0ef7c4d2-cc71-4ee3-b058-ecf90097cf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40868", "type": "seen", "source": "https://t.me/cibsecurity/50336", "content": "\u203c CVE-2022-40868 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ef7c4d2-cc71-4ee3-b058-ecf90097cf81/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:55 +0000</pubDate>
    </item>
    <item>
      <title>c1ea0583-10d3-427e-baeb-96fe69c2994a</title>
      <link>https://vulnerability.circl.lu/sighting/c1ea0583-10d3-427e-baeb-96fe69c2994a/export</link>
      <description>{"uuid": "c1ea0583-10d3-427e-baeb-96fe69c2994a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40866", "type": "seen", "source": "https://t.me/cibsecurity/50335", "content": "\u203c CVE-2022-40866 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:54.000000Z"}</description>
      <content:encoded>{"uuid": "c1ea0583-10d3-427e-baeb-96fe69c2994a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40866", "type": "seen", "source": "https://t.me/cibsecurity/50335", "content": "\u203c CVE-2022-40866 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1ea0583-10d3-427e-baeb-96fe69c2994a/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:54 +0000</pubDate>
    </item>
    <item>
      <title>4a2f0b13-0d3a-4c64-9a67-d351f40f97b1</title>
      <link>https://vulnerability.circl.lu/sighting/4a2f0b13-0d3a-4c64-9a67-d351f40f97b1/export</link>
      <description>{"uuid": "4a2f0b13-0d3a-4c64-9a67-d351f40f97b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40867", "type": "seen", "source": "https://t.me/cibsecurity/50332", "content": "\u203c CVE-2022-40867 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:48.000000Z"}</description>
      <content:encoded>{"uuid": "4a2f0b13-0d3a-4c64-9a67-d351f40f97b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40867", "type": "seen", "source": "https://t.me/cibsecurity/50332", "content": "\u203c CVE-2022-40867 \u203c\n\nTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4a2f0b13-0d3a-4c64-9a67-d351f40f97b1/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:48 +0000</pubDate>
    </item>
    <item>
      <title>efd9f41b-e0d8-4f12-b912-d53a8126d771</title>
      <link>https://vulnerability.circl.lu/sighting/efd9f41b-e0d8-4f12-b912-d53a8126d771/export</link>
      <description>{"uuid": "efd9f41b-e0d8-4f12-b912-d53a8126d771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "seen", "source": "https://t.me/cibsecurity/50331", "content": "\u203c CVE-2022-40869 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:47.000000Z"}</description>
      <content:encoded>{"uuid": "efd9f41b-e0d8-4f12-b912-d53a8126d771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40869", "type": "seen", "source": "https://t.me/cibsecurity/50331", "content": "\u203c CVE-2022-40869 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter \"list*\" (\"%s%d\",\"list\").\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/efd9f41b-e0d8-4f12-b912-d53a8126d771/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:47 +0000</pubDate>
    </item>
    <item>
      <title>621845ad-c8c0-47b3-a57c-c72203bb7a1a</title>
      <link>https://vulnerability.circl.lu/sighting/621845ad-c8c0-47b3-a57c-c72203bb7a1a/export</link>
      <description>{"uuid": "621845ad-c8c0-47b3-a57c-c72203bb7a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "seen", "source": "https://t.me/cibsecurity/50329", "content": "\u203c CVE-2022-40865 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:45.000000Z"}</description>
      <content:encoded>{"uuid": "621845ad-c8c0-47b3-a57c-c72203bb7a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40865", "type": "seen", "source": "https://t.me/cibsecurity/50329", "content": "\u203c CVE-2022-40865 \u203c\n\nTenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-23T18:13:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/621845ad-c8c0-47b3-a57c-c72203bb7a1a/export</guid>
      <pubDate>Fri, 23 Sep 2022 18:13:45 +0000</pubDate>
    </item>
  </channel>
</rss>
